Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F989662281B11F188C91DA9DAE4EC9C.roa
File: 1F989662281B11F188C91DA9DAE4EC9C.roa (raw, json)
Hash identifier: RQTceFt4LY+6e2Tvy/xe6IIOboeQ/0/m+FkWyLZ65fA=
Subject key identifier: 7D:84:64:30:AE:81:C2:45:19:5E:5F:2A:4E:02:67:A3:53:84:71:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C0E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F989662281B11F188C91DA9DAE4EC9C.roa
Signing time: Wed 25 Mar 2026 07:20:39 +0000
ROA not before: Wed 25 Mar 2026 07:20:33 +0000
ROA not after: Tue 28 Apr 2026 07:20:33 +0000
asID: 52263
IP address blocks: 154.194.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114920 (0x1c0e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 25 07:20:33 2026 GMT
Not After : Apr 28 07:20:33 2026 GMT
Subject: CN=69c38cc7-d6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:3b:cb:4e:8d:71:c7:a7:14:ea:9c:26:7b:
80:87:53:e3:ce:d1:7b:cc:a1:24:cc:78:81:10:43:
12:2e:5e:18:31:f1:bd:db:af:8a:3c:f1:78:65:20:
d6:96:38:57:da:67:18:57:f9:3c:4f:66:b8:da:62:
a5:0e:cb:db:63:fd:fc:2c:7e:c3:f7:07:0d:0f:3e:
3f:6d:47:ba:6a:8b:43:95:fb:4a:25:9b:3e:ee:e3:
26:f4:d3:9a:22:ca:20:62:ae:cf:7e:f8:40:50:30:
0e:54:d9:4e:8e:c9:99:7e:cb:ef:26:52:41:02:ff:
89:8e:43:45:0e:55:44:25:f0:aa:48:00:90:5d:1b:
f8:3c:d9:92:2f:7b:df:cc:d3:9f:87:3d:00:57:14:
68:de:1d:32:89:32:30:fe:ce:57:3f:99:89:b1:58:
09:30:8e:ac:2c:4c:65:50:07:b8:fc:f2:41:d3:ab:
85:25:b4:1e:83:91:4a:4d:ca:bf:1f:9a:6e:4c:e0:
67:65:f7:4f:54:f6:11:6a:73:9b:3a:e3:dc:5b:29:
f0:e8:f4:a4:0d:51:0b:5b:6c:f8:af:40:f3:ce:78:
01:a8:e1:c5:85:76:80:7d:4e:2c:2c:d1:d7:2b:58:
de:63:f8:d9:33:d5:98:66:d1:98:0e:f8:23:b3:ff:
4f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:84:64:30:AE:81:C2:45:19:5E:5F:2A:4E:02:67:A3:53:84:71:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F989662281B11F188C91DA9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.69.0/24
Signature Algorithm: sha256WithRSAEncryption
08:d9:e3:b9:7e:e6:e9:33:4b:a0:44:f0:40:87:57:ca:97:ce:
d6:08:82:ea:34:eb:d8:f9:3b:d9:9a:8b:40:76:6e:9a:ca:3b:
6e:54:a6:8c:bf:b5:ba:67:29:66:00:b3:75:2c:88:6f:e4:de:
86:e5:b2:10:fa:6a:52:90:cf:11:0f:6b:72:56:18:52:28:74:
dd:19:a3:9c:38:a9:5c:48:b2:ca:eb:02:6b:5a:1f:40:de:20:
59:60:78:7d:3b:fd:12:90:08:5e:af:ae:63:76:5a:9f:aa:51:
59:e7:98:1b:a3:96:bf:84:ad:2a:e5:37:4c:74:a2:b8:26:7a:
1b:29:e5:f9:d2:a1:f7:ba:f2:ba:e4:a1:df:b4:a2:cf:6b:a5:
b7:16:b0:55:1b:f3:8e:62:f6:41:89:7d:17:62:de:fa:2f:c7:
a2:d0:4c:10:f1:bf:fb:11:94:8e:1f:fa:61:71:91:9e:aa:e4:
d5:3c:c8:bf:ca:56:5a:f4:9e:2a:48:d3:1d:27:f2:fd:64:dc:
e8:e4:2d:91:86:37:d9:5e:65:73:97:49:73:41:fe:fc:88:75:
26:71:8a:69:cd:02:66:22:9d:2b:a9:a4:a2:df:6f:dc:c3:43:
bd:df:5b:66:27:86:8b:24:db:33:9b:0f:00:ef:fd:a8:e7:fe:
1a:38:19:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:13:01 2026 by rpki-client